Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa
File:                     323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa (raw, json)
Hash identifier:          2+XmeKfr5+7wE9g0O2n79jEQ7h3FK3qGsg+q2Hdei20=
Subject key identifier:   8C:C6:9F:F9:49:01:BB:56:81:F1:62:CE:E1:7E:36:5D:50:2C:F1:FA
Certificate issuer:       /CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8
Certificate serial:       03FC87ED77A9F664BC94CFBAEC4B04FEA21C982F
Authority key identifier: CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa
Signing time:             Tue 04 Feb 2025 18:52:53 +0000
ROA not before:           Tue 04 Feb 2025 18:47:53 +0000
ROA not after:            Tue 03 Feb 2026 18:52:53 +0000
asID:                     266848
IP address blocks:        2801:12:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 00:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fc:87:ed:77:a9:f6:64:bc:94:cf:ba:ec:4b:04:fe:a2:1c:98:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8
        Validity
            Not Before: Feb  4 18:47:53 2025 GMT
            Not After : Feb  3 18:52:53 2026 GMT
        Subject: CN=8CC69FF94901BB5681F162CEE17E365D502CF1FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:40:f7:cd:ff:f1:7c:08:f1:28:47:60:09:
                    4b:75:0a:a8:87:8a:b8:82:1e:7c:6f:30:d7:13:a5:
                    2c:25:48:16:8a:ee:dc:ce:3a:74:ca:3d:5b:fb:45:
                    9c:3f:75:c7:f5:cf:71:21:ff:5b:26:72:42:33:89:
                    24:ae:91:75:68:60:67:01:a0:28:0d:50:0c:bf:80:
                    a1:2c:9f:e8:23:e7:57:3d:8e:c0:ca:9d:8a:97:e1:
                    41:2e:a8:a1:57:8b:fd:0f:61:63:cc:6f:f7:aa:b3:
                    40:36:b1:83:d8:e5:dc:e9:94:44:f0:36:ea:5b:59:
                    86:27:82:0a:36:ea:49:25:20:65:22:e4:03:46:60:
                    88:3f:4e:d6:79:34:c0:82:a1:cf:44:87:0e:95:3f:
                    81:c3:d0:b5:9b:19:b8:3b:c4:da:5d:01:20:69:08:
                    13:2a:60:ce:fd:99:1d:f3:60:e6:3c:93:e9:fe:4d:
                    92:99:f6:e1:ab:28:43:d4:9e:92:fa:ca:05:89:a8:
                    7b:f3:81:c3:28:86:74:f0:35:c1:44:68:2c:06:c3:
                    e1:c1:08:0c:64:c7:d6:2d:db:8c:3b:33:ca:1d:34:
                    f8:69:11:62:d1:8a:91:bd:24:f3:19:85:c2:62:83:
                    63:7c:b8:f6:ee:ed:5d:bd:87:77:dc:36:ba:75:26:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C6:9F:F9:49:01:BB:56:81:F1:62:CE:E1:7E:36:5D:50:2C:F1:FA
            X509v3 Authority Key Identifier:
                keyid:CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/323830313a31323a663030303a3a2f34382d3438203d3e20323636383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:90:b9:3d:6e:18:39:d5:76:5a:98:cb:af:5c:76:90:4e:2e:
         11:ae:76:7b:e1:1e:c3:94:7b:28:c0:1a:94:20:59:15:c9:8f:
         c1:58:2f:fb:65:57:84:d8:73:15:ae:f6:75:a1:f3:f2:89:21:
         57:f0:49:93:3d:03:a3:75:9f:cf:78:de:9f:52:a2:73:41:73:
         48:cc:53:6e:99:ca:e3:d7:b0:5c:a6:3c:8e:ca:c8:d0:c4:99:
         3b:f2:68:57:a3:07:25:8f:99:89:b0:4b:e8:48:93:5a:8f:b8:
         50:fe:39:e3:be:e4:03:c7:83:22:9e:ad:a2:8b:49:7d:77:ad:
         f4:a0:bd:83:d0:d6:18:4c:16:71:02:b8:bf:cb:ab:a4:17:d8:
         0c:f8:2f:83:a0:70:2b:3e:b2:0f:f9:e5:b9:e8:b1:55:56:22:
         92:08:e3:14:36:0c:2e:ad:66:77:c9:c7:a0:2b:79:94:76:4e:
         b4:89:16:27:45:24:fe:1c:a5:d6:7e:49:ee:60:72:6f:0d:eb:
         76:f8:03:ad:d2:8e:46:2d:86:a7:5a:58:9a:74:00:0e:24:f5:
         2b:81:ba:16:c5:a2:d9:ae:9b:05:90:77:68:cc:4d:b0:85:ad:
         62:ee:37:d7:9d:05:74:42:90:fe:21:73:95:d5:f7:ca:49:d8:
         2b:6a:18:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:16 2025 by rpki-client